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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 

SUBCOURSE 20-6, MILITARY CRYPTANALYSIS, PART I 
MONOALPHABETIC SUBSTITUTION SYSTEMS 

Security Considerations. 

This course and the accompanying text have been classifi e d RESTRICTED to facilitate 
their dissemination to extension students of the Army Security Reserve. Nevertheless, 
this material is to be safeguarded in the same manna 1 as C ONFIDENTIAL matter, and 
every precaution will be taken to prevent disclosure to unauthorized personnel. 

Introduction. 

This is the first of a series of subcourses on the science of military cryptanalytics. The 
purpose of this subcourse is to teach the student the methods of analysis of systems which 
form a basis for the more simple military cipher systems. An understanding of these prin- 
ciples is necessary to grasp the advanced cryptanalytic techniques employed in the attack 
on the complex systems which comprise present-day military cryptography. 

The scope of this subcourse is: fundamental principles; uniliteral substitution; poly- 
literal substitution; polygraphic substitution; and miscellaneous monoalphabetic substi- 
tution systems. It consists of nine lessons and an examination as follows: 

Lesson 1, Fundamental principles; frequency distributions. 

Lesson 2, Uniliteral substitution with standard cipher alphabets. 

Lesson 3, Uniliteral substitution with mixed cipher alphabets. 

Lesson 4, Polyliteral substitution with mono-equivalent cipher alphabets. 

Lesson 5, Polyliteral substitution with poly-equivalent cipher alphabets. 

Lesson 6, Polygraphic substitution: 4-square and 2-square matrices. 

Lesson 7, Polygraphic substitution: Playfair systems. 

Lesson 8, Polygraphic substitution: quadricular tables. 

Lesson 9, Miscellaneous monoalphabetic substitution systems. 

Examination. 

30 credits are allowed for the subcourse. You will not be limited as to the number of 
hours you may spend in the solution of the subcourse, any lesson, or the examination. For 
statistical purposes you are required to enter the number of hours spent on solution in the 
answer sheet. 

Texts and materials furnished: 

Military Cryptanalysis, Part I (1942). 

‘Appendix 2 (November 1946). 

*TM 11-484, Elementary Military Cryptography, March 1945. 

*TM 11^185, Advanced Military Cryptography, 8 June 1944. 

‘Strip device (ASA Training Aid No. 1). 
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♦Printed and blank alphabet strips (Training Aid No. 2). 

Cross-section paper. 

•This material may be retained upon completion of the subcourse. No other materials are required. 

This course was prepared under the direction of the Chief, Army Security Agency. 

Special Instructions. 

So far as practicable, detailed work sheets which usually form a part of the solution 
should be submitted with the solutions. - In all the lessons of this subcourse, it is required 
that the student recover all the cipher and plain text alphabets used. He will also be re- 
quired to state the method of operation of each system and give the keys upon which each 
component is based. The specific keys and any cipher table employed must be recovered. 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 

SUBCOURSE 20-6 Military Cryptanalysis, Part I 

LESSON 1 Fundamental principles; frequency 

distributions 

CREDIT 3 

TEXT ASSIGNMENT Text, Sections I to IV, inclusive; 

attached memoranda 

MATERIALS REQUIRED Cross-section paper of K inch squares 

SUGGESTIONS None 

EXERCISES 



Weight 



4 1. What four fundamental operations are involved in the solution of practi- 

cally every cryptogram? 



2 2. In the solution of cryptograms involving a form of substitution to what 

simple terms is it necessary to reduce them in order to reach a solution? 

2 3. Is it always necessary to determine the specific key in order to reconstruct 

the plain text? 

10 4. Using cross-section paper prepare a uniliteral frequency bar distribution 

of the letters of the following paragraph: 

“The shortest and surest way to live with honor in the world 
is to be in reality what we would appear to be; all human 
virtues increase and strengthen themselves by the practice 
and experience of them.” 

2 5. a. What percent (in round numbers) of the letters in English telegraphic 

text are E’ s? 

2 b. What are the four most frequent consonants in English telegraphic text? 

2 c. What are the four most frequent digraphs in English telegraphic text? 

2 d. Account for the discrepancies between frequencies of letters in English 

literary text and English telegraphic text. 

4 6. What four facts can be determined from a study of the uniliteral frequency 

distribution of a cryptogram? 



C 
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5 7. Determine the class to which the cipher systems, which were used in en- 

ciphering the following messages, belong: 



a. 0 R A N A 


T H P N 0 


S K T C D 


U E E E S 


C E 


R A E 


R N U S A 


ETLGD 


A Y E C A 








g 




^ ^ - 








ABCDEFGH 


IJKLU 


N 0 P Q R S 


TUVIX 


Y Z 




6. D H J J K 


Q 0 A H R 


X K S 0 F 


H P Q G A 


P P 


H L A 


D I A D E 


H J R 0 A 


U A H Q A 








1 s=_i 












ABCDEFGH 


IJKLU 


N 0 P Q R S 


TUVWX 


Y Z 




e. R 0 L E H 


K B W F Z 


CQCPZ 


N V J W Z 


U I 


V E Q 


E P C I N 


0 J S J U 


YUVQB 








ABCDEFGH 


IJKLU 


N 0 P Q R S 


TUVWX 


Y Z 




8. Which of the following substitution ciphers are monoalphabetic? 




a. U J K L W 


E U V K L 


F S P A Q 


P H T K R 


D Z 


N G L 


S E L Y N 


X Y X B X 


J D A T U 


W E U Z G 


W F 


V X U 


IINZAY 


A 0 S G U 


D C L G I 


0 E W J E 


I F 


OKU 


K N W A P 


K 0 I E V 


A R 0 E V 


W S C W N 


S B 


CYX 














ABCDEFGH 


IJKLMNOPQRS 


TUVWX 


Y Z 




6. H U P Y P 


X X A E P 


A F G Z P 


V G L H A 


S L 


X H U 


S X X A Y 


P ff K A S 


LH'PRH 


A L 0 B A 


X P 


L V S 


W U P J P 


0 B S H U 


H U P G F 


X G K P H 


P V 


S W U 


P J 0 P Z 


S V P Y S 


U P 0 A X 


U L S L P 


C G 


N J X 




Sa | 


| 


8§sl 






ABCDEFGH 


IJKLU 


NOPQRS 


TUVWX 


Y Z 
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c. G X Y V L 


Z X M X S 


L 0 Z G R 


WEJLX PWTKZ 


G M X L W 


Q I V Z W 


Q B R X K 


KTDVL MXAEX 


V H M X A 


L 0 T L Y 


T K D W X 


GBQKQ LWZXG 


RTYYZ 


K T 0 X G 


A W X L Q 


LOZGR XVWGQ 


== 




§ |§ 


i gilgi 


ABODE FGH 


IJKLMNOPQRS 


T U V W X Y Z 



9. The following messages were enciphered monoalphabetically. Determine 
in each case whether the cipher alphabet used was a standard or mixed alphabet 
and if standard, whether direct or reversed. 

5 a. A N V 0 R LOUNQ RLEZW ZHNEZ WZBOR 

ZKYLF AOZSO ONORF PJZPP LDZDN 

LRZLB LABHZ HNAPO WQHOO RZIZU 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 



b. ESPAP LVDLY OECZF RSDTY ESTDO 

TDECT MFETZ YBFTN VWJT.O PYETQ 

JTELD OTCPN EDELY OLCON TASPC 



^gggS= ^ g^ = 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 



e. PYHYL XOLWY JJVYX OILYR YQYPJ 

KNYLK YHYLC PAYAC LYXIR QYJVO 

ZKOXC PCREK UKUPJ IUJUO PRIAS 



ABCDEFGHIJKLMNOPQRSTUVWXYZ 
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25 10. From the intercepted traffic of three intercept stations operating in the 

same sector of the front, the following messages were selected for study by a member 
of the cryptanalytic section at GHQ. They are undoubtedly three versions of 
one enemy message, but there appears to be a number of differences, due no doubt 
to operating difficulties at the several stations. Study the messages and recon- 
struct from them the actual message sent by the enemy station. 

I. Time intercepted 1612 by HS WFF V LDC 

G R 35 B T 

N R 1 7 DYBIE DUFTO AMEJA KIBON 
SGCOY FOBAK DODLA LUFYD KAWAL 

APAYN CODAP KEDUR JOPID JENOX 

MEHAZ LOGIS KUTEG EVAUK IPBEM 

KEHZA HOBWE AVDUZ F 0 F A _ EMCOZ 

EGBLO DOFYO ENC M A W E N 



II. Time intercepted 1610 by MR MFF V LDC 

G R 35 B T 





N 


R 


I 


__ 


D 


Y 


B 


I 


E 


B 


U 


F 


T 


0 


A M 


E 


J 


A 


K 


I 


B 


0 


N 


I 


P 


K 


0 




F 




B 


A K 


D 


0 


D 


L 


A 


L U 


F 


Y 


L 


K 


A 


W 


A 


L 


A 


P 


A 


Y 


N 




__ 






__ 


• _ 




D 


U 


A 


__ ' __ 


P 


I 


D 


J 


E 


N 


0 


X 


N 


E 


H 


A 


Z 


L 


0 


G 


I 


S 


K 


u 


T 


E 


G 


E V 


A 


U 


C 


I 


R 


B 


W 




K 


E 


H 


Z 


A 


S 


0 


B 


W 


E 


V 


A 


D 


U 


Z 


F 0 


F 


E 


T 


E 


M 


C 


0 


Z 


E 


G 


B 


L 


0 


D 


0 


F 


Y 


0 


A 


E 


C 


D 


A 


M A 


W 


E 


N 


tmm 


’ __ 




0 


M 


E 


M 


C 


0 


Z 


A 


c 


F 


A 


H 


L 


0 


F 


I 


R 


0 9 


3 


5 















III. Time intercepted 1612 by YG WFF V LDK 

G R _ _ B T 

N R 1 7 DYBIE DUFTO AMEJA KSBON 

IPCOY A _ DO , _ LUFYL KAWAL 

APETYN CO DAP KEDUR WOPID JENOX 
MEHAZ LOGH KUTEG EVAUK IPBEM 
KEHZA HOBWE AVDUZ FOFET EMCOZ 

EGBLO DOFYO ENCOA MAWEN MAWEN 

EXFOM EMCOZ ACFAH LOFIR 0935 
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MEMORANDUM ON THE <t> (PHI) TEST 



1. The student has seen how it is possible by ocular examination to determine whether 
or not a substitution cipher is monoalphabetic. This tentative determination is based on 
the presence of a marked crest and trough appearance in the uniliteral frequency distribu- 
tion, and also on the number of blanks in the distribution. Hence,, the absence of marked 
crests and troughs in the uniliteral frequency distribution indicates that two or more cipher 
alphabets are involved: the flattened-out appearance of the distribution constitutes one of 
the tests for a polyalphabetic substitution cipher. However, when the distribution contains 
a small number of elements, ocular examination and evaluation becomes increasingly 
difficult and hazy. Now, the student may ask, does a mathematical test exist that could 
determine the monoalphabeticity or non-monoalphabeticity of a distribution? 

2. Without going into the theory of probabilities at this time, or into the derivation of 
the formulas involved, let it suffice for the present to state that there is such a test, kn own 
as the “<t> (phi) test.” With this test, the “observed value of <f>" is compared with the "ex- 
pected value of 4> random” and the "expected value of <f> plain.” The formulas are E (<#>,) = 
,0385N(N-1) and E(<£ p ) =.0667N(N-1), where N is the total number of elements in the 
distribution. The use of these formulas is best illustrated by an example. 

3. The following short cryptogram with its accompanying uniliteral frequency distribu- 
tion is at hand: 



QCYCH ADSKS YZZQE CYKYK QZYSK 
LSZAC TKFCX LKLKC ESZMX KISZX 




ABCDEFGHIJKLMNOPQRSTUVWXYZ 

The observed value of ^ is calculated by applying the formula f(f-l) to the frequency (f) of 
each letter and totaling the result. Thus, 

N - 2 612 111 831 3 61 356 = 50 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
f(f-l) = 2 30 0 2 0 0 0 56 6 0 6 30 0 6 2030 =188 

The expected value of <f> random is 

E(tf0 = .0385N(N-1) = .0385 x 50 x 49 = 94.3 
The expected value of 4> plain is 

E(*„) = .0667N(N-1) = .0667 x 50 x 49 = 163.4 

Now since the observed value of <t>, 188, is equal to and in fact greater than E(^ p ), then we 
have a mathematical corroboration of the hypothesis that the cryptogram is monoalphabetic. 
If the observed value of <t> were nearer to E(4 »t), then the assumption would be that the 
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cryptogram is non-monoalphabetic. If the observed value were just half-way between 
E (</>,) and E(<j> p ), then decision would have to be suspended as there is no further statistical 
proof in the matter. 



4. Two further examples may be illustrated: 



N = 25 



а. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

0 ,0 2 6122 0 12 2 0 0 6 f(f-l) =42 

б. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

0 00 2000600 02 0< 









Since both distributions have 25 elements, then for both 
E(*r) = .0385 x 25 x 24 =21 
E(<#> p ) = . 0667 x 25 x 24 =40 

Hence distribution a is monoalphabetic, while b is not. 



5. The student must not assume that statistical tests in cryptanalysis are infallible or 
absolute in themselves: statistical approaches serve only as a means to the end, in guiding 
the analyst to the most probable fruitful sources of attack. To illustrate this point, if the <t> 
test is taken on the plaintext letters of the phrase 

A QUICK BROWN FOX JUMPS OVER THE LAZY DOG 

N = §^^=5 - ^ _ ^ =33 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
f(f— 1) = 20002000000000 12 00200200000 =20 

E(*,) =40.7 E(*p) =70 

it will be noticed that the observed value of <t> is exactly half of E(0 r ), therefore “conclu- 
sively” proving that the above phrase could not possibly be plaintext in any language! The 
student should be able to understand the cause of this cryptographic ‘phenomenon.’ 
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MEMORANDUM ON TRAFFIC INTERCEPTS 

1. Before a military cryptanalyst can begin the analysis of an enemy cryptographic 
system, it is necessary for him to study the intercept material that is available to him, 
isolate the messages that have been enciphered by means of the cryptographic system to be 
studied, and to arrange the latter in a systematic order for analysis. This work, although 
apparently very simple, may require a great deal of time and effort. 

2. Since, whenever practicable, two or more intercept stations are provided to copy 
traffic emanating from the stations of one enemy radio net, it is natural that there should 
be a certain amount of duplication in the work of the several stations. This is desirable 
since it provides the cryptanalysts with two or more sets of the same messages so that when 
one intercept station fails to receive all the messages completely and correctly, because of 
set difficulties, local Static, or poor operation, it is possible by studying the other sets to 
reconstruct accurately the entire traffic of the enemy net. 

3. In all intercept activities where operators are used for copying the traffic, one of the 
most likely errors to be found is caused by the human error in reception. For this reason 
cryptanalysts and their assistants should be familiar with the Morse telegraph alphabets 
and the most common errors of wire and radio transmission methods so as to be able to 
correct garbled groups when they occur. In this work reference is made to the table given 
on page 82 of TM 11-484 (Elementary Military Cryptography). 



1 



Laaaon 1 , Military Cryptanalyai*, Part 1 (20-6) 



RESTRICTED 




REF ID:A56886 



RESTRICTED 



EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 



SUBCOURSE 20-6 
LESSON 2 



CREDIT 

TEXT ASSIGNMENT 
MATERIALS REQUIRED 
SUGGESTIONS 
EXERCISES 
Weight 

40 _ 1. a. Solve the following cryptogram: 



Military Cryptanalysis, Part I 
Uniliteral substitution with standard 
cipher alphabets 
3 

Text, Section V; attached memorandum 

None 

None 



10 



15 



20 



25 



A' 



B 



JMQVS QZXIF FMZSL IZMLZ CEMEB 



FQOME MDXYQ OZCYY XJMZI VMZIY 



OQWYI DKYMV MZMNQ EQKMX CCWZB 



D 

E 

F 

6 

H 



C Y I X I 
I C D J Q 
Q D N E W 
Y X C B U 
C Z M Q Z 



C D Y Y X 
Y P M M D 
0 J M A W 
MQZME 
B C Y I X 



C B Z Q I 
Y M V M Z 
IBEUD 
C V I D K 
ICDYY 



F Z C Q N 
M F S N Q 
X N M Y X 
C W Z X Z 
X C B Z Q 



H W D 0 X 
E Q K M N 
ZCSUN 
C C B Y X 
F Y X C D 




ABCDEFGHI JKLOOPQRSTUVWXYZ 
<£=2636 E(<£ p ) =2654 ' E(<£,)=1531 
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5 6. What is the specific key? 

5 c. Name two methods of solving ciphers of this type. 

2. Solve the following cryptograms: 

10 1.QHHYL YDWQJ JMEFC 

10 6. YXSED YFSXU HWXUS 

5 c. What are the specific keys? 

10 3. a. In the solution of a substitution cipher by completing the plain com- 

ponent sequence involving reversed standard alphabets, what are the successive 
steps? 

5 b. What is the first step one should take in attempting to solve an un- 

known cryptogram that is obviously a substitution cipher? 

5 c. If this step is unsuccessful and the cryptogram is obviously monoalpha- 

betic in character, what type of cipher alphabet may be assumed to have been 
used? 

5 d. Why do monoalphabetic cryptograms involving standard cipher alpha- 

bets yield such a low degree of cryptographic security? 
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MEMORANDUM ON CRYPT ANALYTIC PROCEDURE 

The following suggestions will promote systematization of procedure and logic in analy- 
sis. Experience has shown that time and labor can be saved by careful attention to these 
instructions. 

1. Most of the problems in this course are already laid out in worksheet form, to spare 
the student the clerical labor of copying out the text. However in those cases where work- 
sheets must be prepared, the cipher text should be copied in ink on cross-section paper, 
one letter per cell. There should be a single space between letters or digraphs in mono- 
alphabetic systems, and a single space between period lengths in polyalphabetic systems. 

In aperiodic systems groupings may be in five letters, unless the system lends a better 
alternative. At least three spaces between successive lines of cipher text is recommended 
in order to leave room for multiple assumptions. Line and column indicators are to be made 
for each cryptogram, to facilitate reference in the step-by-step commentary. Margins 
should be left on all sides for notes, etc. AU worksheets and notes should be submitted 
together upon the completion of a lesson. 

2. Enciphering alphabets, enciphering diagrams, etc., as well as all keywords and specific 
keys should be included in a solution. Keyword derivation from transposed sequences will 
also be shown. Whereas there should be a letter-for-letter decryptment under the cipher 
text, the final plaintext version in word-lengths should correct any errors or garbles in the 
text. Nulls or indicators showing sentence separation, change of key, etc., may be enclosed 
in parentheses. 

3. If completing the plain component sequence yields no solution, then uniliteral * 

frequency distributions (or digraphic distributions, if a digraphic system) should be made. 

Triliteral frequency distributions will enable the separation of vowels and consonants and 
furnish much additional valuable data. In a difficult case triliterals may give the only 

dues to solution: this is especially true in foreign language cryptograms. If the problem 
entails the sdection of proper generatrices in polyalphabetic ciphers, the use of alphabet 
strips will save much time. In polyparti te systems, reduce the cryptogram to mono- 
literal terms wherever possible. 

4. Repetitions should be underscored in a manner facilitating their location and inter- 
pretation: colored pencils will be found useful. It is recommended that the frequencies of 
letters comprising the repetitions be inscribed over their respective letters. Likewise, the 
frequencies of the first 10 and last 10 letters should also be inscribed, as in many cases these 
positions lend themselves readily to attack. If the problem proves difficult, then it is best 
to inscribe the frequencies over all the cipher letters of the text, in order better to visualize 
frequency-patterns of words. 

5. Step-by-step analyses should accompany all problems: they should be brief and 
concise, yet at the same time specific. The steps should be jotted down os they are made, 
and at the end they should be combined into a complete resume of the analysis. It is not 
necessary to be verbose, but all the steps which were taken to achieve solution should be 
specified, so that at any future date the solution may be reconstructed following the exact 
manner in which it was first accomplished. Assumptions of words, etc., should be referred 
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to with line and column indicators and couched in the proper cryptologic language or symbols. 
All keywords and specific keys, as well as the mechanics of the general system, should be 
stated at the end of the commentary. 

6. Violations of cryptographic security observed in the problem studied may be included 
at the close of the commentary. These violations may be stereotypic phraseology (especially 
in beginnings or endings of messages), related keywords, keywords of military nature, 
unnecessary punctuation, general wordiness, or any other practices dangerous to crypto- 
graphic security which may be seized upon by the cryptanalyst as entering wedges in solution. 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 



SUBCOURSE 20-6 
LESSON 3 

CREDIT 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXERCISES 

Weight 



Military Cryptanalysis, Part I 
Uniliteral substitution with mixed cipher 
alphabets 
3 

Text, Section VI; attached memorandum 
Cross-section paper of % inch squares 
None 



20 1. o. Construct a triliteral frequency distribution showing one prefix and 

one suffix of the cryptogram below. On the worksheet below indicate by under- 
scoring in black all repetitions of three or more letters. Other significant details 
may be marked in different colors. 

6 b. Prepare a condensed table of repetitions of digraphs and trigraphs 

appearing more than twice, and include all repetitions of longer polygraphs. 

20 2. a. Using the data 'obtained in a and 6 above, complete the solution of the 

cryptogram. 



SRIKN AQJIR NQAIP FTEAI OJIRI 

JIPJG GAQQA'JIREJ BBAPR NVRNR 
PHKST NREFH QSIAO LSAIH NHAEY 

XJIRJ BJTNK HSNJF QQSJK JIRKN 

AQJIR NQSHS RQSLH SBJTN SLEAU 

AQAJI AQAIU A P A I A SXJBY FTRGJ 

TISHA IGJUA I0VRQ SSJHS SHPDJ 

TNKJQ ASAJI QVRQS JBBHN NRFFQ 

I 

N A E OR QSJKP JIBAN GHSAJ IJBSL 

AQNRK JNSAQ NRMTR QSREX 
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2 6. Determine the cipher alphabet and the keyword used. What is the 

specific key (A p = 0 e )? 

3. Using the same components as determined in 2b, solve the following 
cryptograms and indicate the specific keys: 

10 a. 

FPFEN IYRUE PWSFX FWVXK DFGYP 
ALCASKNVALW EYX P LPCJN YUXHR 
K P F W X 



10 



NOPQRSTUVWXYZ 
E(* r ) = 114 



ABCDEFGHIJKL 
* = 144 E(* p )=198 

b. 

EPSSP A 0 E 0 A DKTPU UXMNJ 



ABCDEFGHIJKLMNOPQRSTUVffXYZ 
* = 16 E(* p ) =25 E(*,)=15 

2 4. a. What two places in every message lend themselves more readily to 

successful attack by the assumption of words than do any other places? Why? 

2 b. What is meant by the “probable word method” of solution? 



2 5. a. What is meant by the word pattern “A B C B A D B”? 

b. For each pattern given below, indicate one good English word that 
contains the pattern: 

2 (l)ABGBADB 

2 (2) A A B A 

2 (3) A B C D A 

6. The following cryptograms, enciphered with random cipher alphabets, 
are in bona fide word-lengths. Solve them. 

5 a. 

HY ARVJZGHAROT VK CGKMMGKHZM LKUG 
LKUG 0R0E HOZ EMVHFSRMJROT 
JEHZPUHGVEGM R0 MCJKKSJKUME 



REPTRICTEB 



2 




1 
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RGRQRU TDSPYURDP ZFTAVDRC AYCFO 
JO DRZYUUFSPPFUZR TFADYGP 

.7. In solving several unrelated monoalphabetie cryptograms the following 
cipher alphabets were reconstructed. Recover all keywords in each case. To 
expedite solution, significant segments have been underlined. 

2 o. 

PlABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: N L W PFRTHSYDQ A K V EBMXGCOZ IJU 

2 6 . 

PlABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: Z Q X P E 0 N M W L K J H G F DBVYUTRICSA 

2 c. 

PlABCDEFGHIJKLMNOPQRSTUVWXYZ 
CrPQERVMOZWUTHA.X BCD FSYG I JKL N 

2 d. 

PlABCDEFGHIJKLMNOPQRSTUVWXYZ 

CrAUZJTXHSWGRMBNOCIQFEKYPDVL 

t 2 

PlABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: C K V E B 0 Y F D P Z GQHSITLWNJURAMX 



c 
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MEMORANDUM ON ALPHABET RECONSTRUCTION 
AND KEYWORD DERIVATION 

1. Concurrent with the solution of a cryptogram, there should be a simultaneous effort 
in the reconstruction of the general system and recovery of the specific keys. Much labor 
can thus be saved as recovery of the keys early in the stages of solution transforms the 
process of decrypting into one of decryptographing. 

2. A cipher alphabet consists of two sequences, e.g., 

a. the plain component is a standard alphabet, cipher component mixed; 

b. the cipher component is a standard alphabet, plain component mixed; 
e. both components are the same mixed sequence; 

d. both components are the same mixed sequence, running in reverse; or 

e. the components are differently mixed sequences. 

3. Let us examine several types of mixed sequences, using the keyword HYDRAULIC as 
an example: 

493 718652 
HYDRAULIC 
BEFGJKMNO 
PQSTVWXZ 

The ordinary keyword-mixed sequence derived from the above will be: 

0. HYDRAULICBEFGJKMNOPQSTVWXZ 

The two principal transposition-mixed types will read: 

b. HBPYEQDFSRGTAJVUKWLMXINZCO and 

c. AJVCODFSHBPINZLMXRGTUKWYEQ 

Other types may arise from route transpositions as follows: 

d. HBPQEYDFSTGRAJVWKULMXZNI CO 

e. H Y B P E D R F Q S G A U J T V K L I M W X N C 0 Z 
/. PBQHE-SYFTDGVRJWAKXUKZLNIOC 

g. HYDRAULICONMKJGFEBPQSTVWXZ 

h. OCILUARDYHBPQSTYWXZNMKJGFE 

1. hyeb.pqstgfdraukjvwxznmlico 

j. -CPIOQBLNSEHUMZTFYAKXVGDRJW etc. 

Any transposition system may be employed to produce a systematically-mixed sequence: 
practicability of method is the only determining factor. It must be remembered that the 
greatest amount of systematic mixing will produce a sequence inherently no more secure 
than a random alphabet. 
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4. The student would do well to construct both enciphering and deciphering versions 
of cipher alphabets recovered. For example, in the following case 

Plain: JQNMFHLEBRSKGYZOTICDUVAWPX 

Cipher: ABCDEFGHIJKLMNOPQRSTUVWXYZ 

no semblance of a key is apparent; but in the inverse form 

Plain: ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher: WISTHEM* FRALGDCPYBJKQUVXZNO 

the key-phrase “NOW IS THE TIME FOR ALL GOOD MEN TO COME TO THE AID 
OF THEIR PARTY” is quite clear. In other types of mixed sequences, first the one form 
is attacked, and then if negative results are obtained the inverse form is treated. 

5. Let us consider the following cipher alphabet: 

P: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: DWZMSOCRYATXBE F U GQHIVJKLNP 

The section V W X seems to be superimposed parts of the non-keyword portions of mixed 
J K L 

sequences. Adding Y Z to the plain component, we get V W X Y Z which is certainly con- 

J K L N P 

sistent as far as alphabetical progression goes, and indicates that the letters M and 0 are 
present in the keyword of the cipher component. Continuing in this vein, the section 
MNOQSTVWXYZis rapidly established by correlating both sequences. It is obvious 
BEFGHIJKLNP 

that the plain component keyword begins right after the Z, and that the cipher component 
keyword probably just precedes the B. Going to the right, Z R H suggests keywords like 

PQR 

RHOMBOID, RHEUMATISM, etc. These trials are quickly repudiated; therefore we 
go on to Z R E which is acceptable. Z R E K is found wanting, but Z R E P is very sat- 
P Q S P Q S T P Q S U 

isfactory, and this is soon expanded toZREPUBLIC, and in a moment or two we 

PQSUVWXYZ 

recover the complete cipher alphabet: 

P: REPUBLICAN DFGHJKMNOQSTVWXYZ 
C: QSUVWXYZDEMOCRATBEFGHIJKLNP 

6. In the example below the student will observe that the alphabets are reciprocal: 

this is an indication of identical sequences at a shift of 13, or that a mixed sequence running 
against itself in reverse has been employed. In this case the W X Y Z points to the latter 
hypothesis. Z Y X W 

P: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: HOJFTDNAKCIMLGBSUVPEQRZYXW 

Starting with the V W X Y Z R cluster, we see that the keyword begins with the letter R; 
R Z Y X W V 

therefore the next letter should be a vowel. Z R A is not acceptable, but Z R E is fine, show- 

W V H W V T 
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ing that the letter U appears in the keyword. Continuing the same line of reasoning as in 
the preceding example, and with a little further experimentation, the final alphabet is 
discovered to be 

P: REPUBLIC A NDFGHJKMOQSTVWXYZ 
C: VTSQOMKJHGFDNACILBUPERZYXW 

7. In the next example, all efforts to derive keywords on the basis of keyword-mixed 
sequences are fruitless: the conclusion is therefore drawn that this is a case of a transposition. 

P: ABCDEFGHIJ K L H NOPQRSTUVVXYZ 
C: ACSEJYIGWLFVMHXNKZPBQRDUTO 

Considering the mechanics of the cryptography involved, and assuming for the time being 
that Z is at the bottom of the matrix and not in the keyword, we start with the letters to 
the left, or if this fails, to the right of Z in the ciphet component, obtaining the column N 

K 

Z 

which is not incompatible if N is in the keyword on the top row. If we place Y to the left 
of Z and build up its column, we get E N which is certainly excellent. This is expanded 

J K 
Y Z 

into I MEN which quickly becomes 71843526 9 . This last example was very 
GHJK PARLIMENT 

WXYZ BCDFGHJKO 

QSUVWXYZ 

easy because none of the letters V V X Y Z appeared in the keyword ; but other cases should 
hardly prove more difficult. 

8. Two additional methods that have been encountered for deriving mixed sequences 
may be mentioned. One is a slight modification of the preceding paragraph, when the 
keyword contains repeated letters, viz: 

187349526 
COM. IT. E. 

ABDFGHJKL which produces the mixed sequence 
NPQRSUVWX 
Y Z 

CANYEKWFRIGSJVLXMDQOBPZTHU 

The other method is the interrupted-key columnar transposition system, viz: 

2 1 5 5 4 6 
J A N U R Y 
B C) 

D) 

E F G) which produces the mixed sequence 

H I K L M) 

OPQS) 

T V W X Z -) 

ACFIPVJBDEHOTNGKQIRMZULSXY 
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The first example will succumb to the treatment outlined in paragraph 7, whereas the 
second method is vulnerable owing to the presence of the fragments E H 0 T, FIPV and 
G K Q W in the sequence which may be anagrammed. Note the fragment B D E H 0 T, 
composed of an ascending sequence of letters : this is an outward indication of the interrupted- 
key columnar method. 

9. There are still other methods used for the production of mixed sequences, but space 
does not permit giving further examples. However the student should by this time be able 
to devise methods of attack for any special cases that may present themselves, based upon 
the weaknesses or peculiarities inherent in the system of cryptography involved. 
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SUBCOURSE 20-6 
LESSON 4 

CREDIT 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXERCISES 

Weight 

20 1. Solve and recover all keys: 

5 



Military Cryptanalysis, Part I 
Polyliteral substitution with mono-equiv- 
alent cipher alphabets 
3 

Text, Section VII; attached memorandum 
Cross-section paper of H inch squares 
None 



10 15 
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A 


E 


H 


R 
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) 3 


12 


— 


— 


3 


2 


13 


— 


21 


5 


) 10 


14 


6 


10 


3 


* 3 


7 


— 


5 


3 


22 


4 


22 


13 


2 



<#> = 2288 E to,) =1362 E top) =2270 

(25-element alphabet) 

2. This message was sent by the Fifteenth Infantry. Solve it and recover 
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NG 


BY 


OX 


OX 


RY 
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OG 


CN 


AO 
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OG 


NO 


OX 
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OG 
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1 9 
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12 3 


1 




















B 


1 1 


1 


3 1 


6 
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1 3 


11 


2 1 


2 
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9 2 
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2 






















5 - 


- 


9 1 


1 














<t> = 


716 




E(<#>. 


•) =410 


E (<k,) =960 (approx.) 
















(36-element alphabet) 
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Solve and recover all keys: 
5 
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RA 


PR 


GS 


RE 
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AR 
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PG 


PE 


RG 


AR 


PE 
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RR 


RG 
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GS 


GA 
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PP 


RA 


EP 

V 


ES 


GP 


RA 


GP 
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PR 


PR 


AE 


GR 


GP 
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RR 


GR 


AS 


AS 
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GR 


PG 


GA 


EP 


RG 


GP 


EE 
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GR 
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AR 


GS 


RA 
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GP 


GP 


GA 
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ES 
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GP 
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AG 
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4. Solve and recover all keys: 



AAC 


ACA 


AAA 


ACA 


AAC 


ACA 


ACC 


BAC 


ACA 


CCA 


CAA 


ACB 


AAC 


BCC 


ACA 


ABA 


ABA 


BAA 


BBB 


ACA 


ACC 


ACB 


BCC 


BAB 


ACA 


AAC 


AAA 


AAB 


CBA 


ACA 



AAA 


CAA 


ACB 


AAC 


ABB 


BBC 


AAC 


ACA 


BBB 


AAB 

\ 


BCC 


ACA 


ACC 


ABB 


CBB 


AAB 


ABC 


ABC 


BAA 


BBA 


CBA 


BAA 


ACC 


BAC 


ACA 


ABB 


CAA 


ACC 


ACA 


CBB 


CAB 


CAA 


ABA 


AAB 


ABB 


AAB 


CAA 


ACC 


ABA 


ACC 


CAA 


AAC 


ABB 


BBC 


CAA 


AAA 


AAC 


BCA 


ABA 


AAB 


CBC 


CAA 


ACC 


ACA 


AAA 


AAB 


CBA 


ACA 







AAABBB C CC 
ABCABC A BC 



5785 5 2 14 38 



8 1 - 



E(> r ) =284 E(>p) = 505 (approx.) 

(27-element alphabet) 
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5. The following is a test in the Baudot teletype code enciphered by a simple machine 
employing five two-position switches which operate polarized relays. Each switch has the 
function of changing the polarity of its respective baud (a single "mark” or "space” impulse), 
if the switch is in the ‘active’ position. If the switch is in the ‘inactive’ position, the polarity 
of the baud is unaffected. The switch settings remain constant for each message. As an 
example, if switches 1 and 4 are active (*), and 2, 3 and 5 are inactive (-), then the word 
ENEMY is enciphered thus: 

Key: * *— * *— * *— * *— *— *— 

Plain: MSSSS SSMMS MSSSS SSMHM MSMSM 

Cipher: SSSMS MSMSS SSSMS MSMSM SSMHM 

It is suspected that the same signature is in the text as was present in Problem 2. Solve 
the message and recover the switch settings. 



1 
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9 


10 
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MMSMM 


MMMMS 
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MMSSM 


MUSKS 
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MMMSS 


SSMSM 
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M M M 


M S S S 
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M M S 
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S M S M 


s 











514431 6 1 
15-841 13 1 
-34313 1 2 
2-5-2 - - 3 



^> = 386 E(<£ r ) = 234 E(^,) =480 (approx.) 

(32-element alphabet) 
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MEMORANDUM ON THE BAUDOT TELETYPE CODE 

Teletypewriters employ in their operation a fixed-length five-element code similar to 
the Baconian quinqueliteral cipher. Each character in the code consists of five "mark” 
or “space” impulses in the 32 possible permutations. However, to allow for a greater num- 
ber of characters than 32, a “Fig.” indicator changes to an upper alphabet and the “Ltr.” 
indicator re-establishes the lower alphabet. The other process symbols, in addition to the 
space between words, are the CR (carriage return) which returns the carriage to the left- 
hand margin on the completion of a line; the LF (line feed) which feeds the paper, rolling 
the carriage to the next lower line; and the “Bell” which rings a bell to signal the operator 
at the receiving end that there is traffic ready to be transmitted. Below is a diagram of the 
normal Baudot code in international use; the black dots represent the holes in the teletype 
tape which are the “mark” impulses, while the "space” impulses are unperforated. 
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The example below is a Baudot tape, containing the beginning of the phrase “NOW 
IS THE TIME FOR ALL GOOD MEN ” 



• •• ••• •• 
• • • • ••• • 



• •••• ••••••• • •• • 

• • • ••• •••• • • 

•• •• • • • •• ••• • 



NOW IS THE TIME FOR ALL GOOD MEN 



1 



RESTRICTE D 1 



Lesson 4, Military Cryptanalysis, Part 1 (20-6) 












REF ID:A5 6886 



RESTRICTED 



EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 



SUBCOURSE 20-6 
LESSON 6 

CREDIT - 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXERCISES 

Weight 



Military Cryptanalysis, Part I 
Polyliteral substitution with poly-equiv- 
alent cipher alphabets 
3 

Text, Section VIII ;attached memorandum 
Cross-section paper of inch squares 
None 



5 1. a. What is the purpose of providing variants in a cipher system? 

5 b. From the cryptanalytic point of view, how does simple monoalphabetic 

substitution differ from monoalphabetic substitution with variants? 



20 2. Solve and recover all keys: 

5 10 15 
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DR DD SY DA RA RR SB YA BT TY AR HI DB TB AD 
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SH 


HA 


RI 


DA 


AI 


IB 


YB 


DI 


SI 


DD 


YA 


BB 


YT 


HH 


II 


YH 


TY 


BS 


DD 


YR 


SR 


RI 


HH 


TD 


DT 


TA 


AI 


RY 


ST 


SH 


DH 


AB 


AI 


TI 


YT 


AH 


HY 


AR 


AI 


RH 


DI 


YD 


DD 


YA 





TB 


DT 


HH 


SB 


AA 


DT 


DD 


RH 


YD 


DR 


YB 


DH 


SH 


SR 


DD 


DA 


SI 


RI 


ID 


ST 


BD 


SI 


SD 


TT 


BH 


SH 


RI 


AA 


HI 


BB 


IS 


BI 


HI 


RH 


AY 


DB 


BA 


AI 


DH 


SH 
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26 4. Solve and recover all keys: 

5 10 15 



■* 



A 


99 


18 


57 


82 


12 


28 


78 


90 


25 


04 


15 


30 


04 


06 


14 


B 


57 


34 


64 


20 


72 


15 


30 


02 


57 


44 


84 


52 


66 


11 


81 


C 


87 


58 


35 


78 


31 


14 


70 


90 


68 


47 


30 


13 


15 


21 


86 


D 


92 


43 


10 


30 


35 


20 


31 


32 


64 


18 


57 


26 


84 


12 


06 


E 


34 


25 


69 


72 


90 


78 


07 


90 


31 


29 


57 


50 


82 


19 


53 


F 


31 


72 


51 


36 


10 


86 


36 


47 


18 


67 


26 


04 


92 


82 


30 


6 


Q8 


31 


58 


90 


88 


87 


91 


10 


20 


82 


31 


14 


56 


57 


31 


H 


88 


04 


31 


30 


66 


47 


30 


36 


18 


99 


20 


06 


97 


31 


21 


j 


55 


99 


18 


20 


10 


28 


74 


68 


90 


41 


69 


82 


90 


78 


31 


K 


86 


88 


15 


91 


26 


92 


72 


87 


14 


43 


20 


53 


28 


64 


92 


L 


47 


02 


58 


35 


10 


96 


05 


34 


37 


85 


06 


26 


80 


50 


92 


M 


68 


10 


70 


81 


92 


18 


02 


86 


49 


47 


07 


82 


94 


06 


69 


N 


15 


21 


90 


56 


10 


40 


01 


68 


90 


15 


35 


57 


52 


32 


60 


P 


47 


64 


36 


71 


06 


55 


00 


68 


78 


45 


52 


12 


69 


43 





c 



3 



RESTRICTED 




REF ID * A5 688 6 



25 5. This message is suspected of having an ending similar to Problem 4. Solve 

it and recover all keys: 



22 


08 


71 


29 


19 


83 


05 


34 


76 


58 


05 


56 


62 


26 


22 


35 


48 


75 


13 


78 


58 


34 


65 


02 


07 


71 


51 


87 


35 


96 


10 


32 


69 


45 


47 


81 


46 


11 


01 


14 


67 


37 


75 


79 


35 



30 53 29 37 46 60 19 30 94 66 49 68 88 57 98 



84 93 30 86 28 90 51 04 53 03 84 76 58 31 57 



42 12 86 49 36 79 54 28 09 38 24 41 86 63 79 



08 


28 


67 


68 


66 


94 


22 


63 


71 


66 


83 


56 


05 


07 


58 


95 


60 


19 


62 


26 


48 


23 


59 


40 


38 


15 


67 


43 


92 


42 


62 


77 


43 


79 


54 


69 


38 


65 


16 


82 


10 


96 


67 


97 


57 



48 93 24 13 53 29 46 37 32 65 12 94 84 95 68 



83 93 98 37 75 79 45 12 97 84 53 03 75 76 95 



31 


29 


32 


21 


49 


17 


25 


73 


00 


69 


86 


36 


79 


45 


19 


77 


98 


38 


95 


97 


93 


94 


98 


72 


42 


59 


00 


08 


50 


44 


27 


26 


62 


57 


06 


91 


23 





























FREQUENCY DISTRIBUTIONS 



A E I 0 U 



ABDHIRSTY 

A 
B 
D 
H 
I 
R 
S 
T 
Y 

Problem 3 



0123456789 0123456789 

0 
1 
2 

3 

4 

5 

6 

7 

8 
9 

Problem 4 Problem 5 



2112131231 
21321111-4 
-132213134 
323-23244- 
11321331 33 
12-42-2442 
2-42-33433 
-311-43216 
-1134-411- 
111444234- 





B 


2 6 18 7 


C 


- 5 2 3 1 


D 


4 6 18 7 


F 


2 1 1 2 - 


G 


- 3 2 3 - 


J 


2 3-92 


K 


1 3 6 2 - 


L 


2 3 - 1 - 


M 


- 3 1 4 - 


N 


6 12 


P 


1 2 3 1 - 


R 


3 3 1 


S 


4 2 1 - - 


T 


1251- 


V 


4 2 2 



Problem 2 
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MEMORANDUM ON STEREOTYPIC BEGINNINGS AND ENDINGS 

Within the confines of the comparatively limited scope of military messages, stereotypy 
of phraseology is inevitable. Particularly in the beginnings of messages is this limitation 
apparent: thus these positions lend themselves most readily to attack by the cryptanalyst. 
The following list of stereotypes have a high frequency of positional occurrence, and there- 
fore are to be shunned by the cryptographer as conscientiously as they are looked for by 
the cryptanalyst. It is to be noted that a stereotypic initial word often may suggest a whole 
opening phrase. For example, if a message begins with the word HEAVY, then it is not 
too unlikely that the opening phrase is "HEAVY ARTILLERY (FIRE, BARRAGE) 
(FALLING, INTERDICTING) . . . which might be expanded into “HEAVY ARTIL- 
LERY FIRE FALLING ON OUR POSITIONS (NORTH, EAST, SOUTH, WEST) OF. . .” 



BEGINNINGS 



ACKNOWLEDGE 

ADVANCE 

ADVISE 

ARRIVE 

ATTACK 

ATTENTION 

CANCEL 

CITE 

COMMANDING (GENERAL) 

COMMUNICATION (OFFICER) 

CONCENTRATE 

CONFIRM 

CONTINUE 

DEPART (-URE) 

DISCONTINUE 

ENEMY 

EQUIPMENT 

EXPEDITE 

FOLLOWING 

FOR 

FROM 

HEAVY 

HOSTILE 

INFORM (-ATION) 

IN REPLY (TO) (YOUR) 



LOCATION (OF) 

NUMBERS (1, 1st, 2, 2nd, etc.) 

ORDERS 

OUR 

PARAPHRASE 
PLEASE 
POSITION 
PREPARE 
PROCEED 
RECEIPT 
RECEIVE 
RECOMMEND 
REFER (-RING) (TO) (YOUR) 
REFERENCE (YOUR) (MESSAGE, RADIO 
GRAM, TELEGRAM) (NUMBER) 
REPEAT 
REPORT 
REQUEST 
REQUIRE 
RERAD 
REURAD 
SEND 
SUPPLY 
VERIFY 
YOUR (S) 



ACKNOWLEDGE 
ADVISE (IMMEDIATELY) 
CONFIRM 
END 

END OF MESSAGE 
IMMEDIATELY 
NUMBERS (1, 1st, 2, 2nd, etc.) 



ENDINGS 
PERIOD 
REPLY 
REFERENCE 
REQUESTED 
SIGNED (NAME) 

STOP 

TITLES (MAJ, COL, ETC.) 
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LESSON ASSIGNMENT SHEET 



SUBCOURSE 20-6 
LESSON 6 

CREDIT 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXERCISES 

Weight 



Military Cryptanalysis, Part I 
Polygraphic substitution systems: 4- 
square and 2-square matrices 
3 

Text, pars. 41-44, Section IX; attached 
memoranda 

Cross-section paper of }{ inch squares 
Review Section VIII, TM 11-485 



4 1. a. What is polyliteral substitution? What is polygraphic substitution? 

4 b. In true digraphic substitution, if RE P yields QN C , is it possible for RN P 

to yield AZ C ? 

2 c. What is the fundamental purpose of polygraphic substitution? 

10 2. a. Construct a digraphic frequency distribution of the cryptogram below. 

20 b. The following cryptogram is suspected to contain the word INFANTRY. 

Solve it and recover all keys: 

5 10 15 



A 


AF 


SM 


DH 


FG 


SP 


OS 


AB 


TU 


ZF 


0G 


TR 


UH 


IF 


PQ 


SO 

» 


B 


R0 

< 


MA 


CS 


KN 


SM 


KH 


TT 


UF 


HF 


UE 


QM 


OC 


NU 


DC 


EA 


C 


AM 


QM 


AF 


VD 


LK 


BT 


QU 


FC 


NI 


TT 


CG 


MT 


SA 


HH 


PU 


D 


ZR 


KU 


IW 


RH 


DS 


IM 


SW 


AC 


MT 


SP 


OS 


AB 


GN 


KP 


TD 


E 


TT 


TU 


IM 


II 


SN 


SA 


HH 


QM 


SH 


II 


PQ 


RH 


DS 


IM 


SW 


F 


Y0 


CC 


UF 


QI 


TR 


MT 


SP 


OS 


AI 


KU 


KU 


IW 


SO 


R0 


MA 


G 


CS 


KN 


Y0 


QA 


FC 


CS 


VS 


DH 


LS 


KS 


AC 


QT 


0Q 







<- 
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20 3. The enemy is suspected of using a 4-square matrix wherein the plain 

• components are mixed sequences and the cipher components are standard alpha- 
bets (I = J) inscribed in straight horizontals. Solve the following cryptogram and 
reconstruct the original matrix: 

5 10 15 



A 


DO 


GV 


XX 


HA 


TP 


PN 


DF 


OW 


FS 


YN 


DP 


YK 


DP 


YK 


WH 


B 


WL 


IA 


NF 


OB 


DE 


GV 


HX 


VC 


OP 


RY 


OP 


DQ 


RY 


WT 


DP 


C 


YK 


DP 


YK 


QZ 


FS 


IX 


GW 


DB 


AF 


HW 


NE 


VO 


YA 


LZ 


CW 


D 


TY 


DQ 


GN 


WN 


NS 


IH 


CA 


VI 


HH 


OF 


WZ 


YN 


WM 


WH 


OG 


E 


EV 


YN 


NL 


NK 


XI 


WH 


WL 


IA 


NF 


OB 


DE 


GV 


FS 


OF 


WH 


F 


NF 


OP 


DQ 


XO 


FA 


WN 


LQ 


DP 


YK 


BP 


IE 


DP 


YK 


SD 


NQ 


G 


DP 


YK 


TP 


PN 


VT 


TF 


BL 


MW 


CW 


IE 


TE 


FS 


CY 


OK 


YD 


H 


0M 


XE 


VT 


FS 


IX 


HB 


IH 


MP 


YN 


LZ 


YN 


NW 


GR 








4. Solve the following cryptogram and reconstruct the enciphering matrix. 
It is suspected that this message probably has a stereotypic ending. 

5 10 15 


A 


NK 


KZ 


FQ 


KG 


QD 


RR 


RO 


NK 


MV 


TR 


KE 


HQ 


FZ 


QR 


PE 


B 


NK 


RD 


FW 


IV 


EF 


FF 


XT 


NB 


LZ 


NV 


EU 


RO 


PQ 


DA 


ML 


C 


EU 


KV 


FF 


LL 


FM 


CF 


QP 


El 


RC 


SO 


RS 


BC 


SD 


LN 


CD 


D 


IE 


HG 


TM 


VE 


FP 


QP 


SI 


KZ 


FW 


FP 


NB 


OR 


IZ 


IW 


EF 


E 


FF 


XT 


LW 


NX 


PD 


KK 


KV 


RD 


FP 


QR 


MX 


AR 


PZ 


FW 


ML 


F 


EU 


IN 


FF 


LW 


NC 


LN 


CD 


QP 


SI 


KE 


FR 


HP 


ON 


IM 


HC 


G 


SM 


KZ 


IL 


FN 


FP 


LV 


LQ 


PD 


AS 


FK 













RESTRICTED 



2 




REF ID:A56886 



RESTRICTED 

20 5. The following two messages were intercepted on the same circuit half an 

hour apart, message “B” being in answer to a request for a repeat. Solve the 
texts, and determine the cause of the cryptographic error involved: 



MESSAGE “A” 

5 10 15 



A 


DS 


ZM 


CM 


GI 


QM 


AB 


VG 


ED 


SU 


XI 


TO 


SQ 


OR 


NR 


SB 


B 


PN 


Q0 


HN 


TB 


LL 


QN 


QS 


SI 


CR 


YU 


TQ 


CC 


KG 


AT 


FN 


C 


YF 


VG 


ED 


CG 


NU 


MO 


LL 


NP 


SO 


SB 


NP 


SQ 


OR 


NR 


SB 


D 


PN 


CM 


MB 


RP 


0G 


LL 


YX 


CM 


GI 


QM 


AB 


SO 


NQ 


LZ 


LC 


E 


FD 


YR 


VI 


OR 


SB 


































MESSAGE “B 


11 
























5 










10 










15 


A 


OY 


RU 


PU 


KV 


TU 


WO 


IW 


LL 


NR 


EV 


VD 


NB 


BZ 


YZ 


NO 


B 


AS 


TD 


HS 


VO 


DE 


TS 


TY 


NV 


PZ 


SR 


VB 


PM 


FW 


WQ 


XS 


C 


SK 


IW 


LL 


PW 


YR 


CD 


DE 


YC 


ND 


NO 


YC 


NB 


BZ 


YZ 


NO 


D 


AS 


PU 


CO 


UC 


BW 


DE 


SF 


PU 


KV 


TU 


WO 


ND 


YB 


DI 


DM 


E 


XL 


sz 


IV 


BZ 


NO 
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MEMORANDUM ON THE SOLUTION OF 2-SQUARE MATRICES 

1. If the student reviews paragraph 34 of TM 11-485, he will refresh his memory on 
the enciphering and deciphering processes of the two types of 2-square matrices. In the 
horizontal 2-square matrix illustrated in Fig. 36, the first member of the plaintext digraph 
comes from the same square as the second member of the cipher-text digraph, whereas the 
9 2 p comes from the same square as the 0 1 0 . Thus in the digram, TH P = SD C ; AN P = 110,.; RE P = 
ER C ; M0 p = 0M c . However, the cryptography of the vertical 2-square matrix is analogous 
to that of the 4-square system, in that the 0 1 ,, and the 0 ! c come from the upper component, 
whereas the 0 2 p and 0 2 c are found in the lower component. Thus in Fig. 38, C0 p = IA c ; 
RE P = IL C ; CA p = CA c ; WI P =WI C . 

2. The cryptographic idiosyncracies of 2-square matrices may be exploited by the 
analyst in attacking such systems. In the vertical 2-square, 20% of the possible 625 plain- 
text digraphs will be self-enciphered, such as CA p = CA c in the example. In the horizontal 
2-square, 20% of the 625 digraphs will be enciphered by themselves in reversed form, as in 
the example RE p =ER e . Therefore if an examination of the cryptogram at hand discloses 
a goodly proportion of cipher digraphs which could well be plaintext digraphs, then one may 
assume that a vertical 2-square has been used. On the other hand, if a large number of 
cipher digraphs could be good plaintext digraphs if the positions of the letters were reversed, 
then the assumption would arise that the cryptogram was produced by a horizontal 2-square 
matrix. Sometimes skeletons of words or even whole phrases are self-evident in the text, 
affording an easy entering wedge into the problem. 

3. During the reconstruction of the squares of the matrix, the student should keep 
clear on his worksheets which letters are in the same row, and which are in the same column. 
It will be found expeditious to draw a dividing line (either horizontal or vertical, depending 
on the type of 2-square involved) on the page to keep the elements of the two squares in- 
dependent, recording the values which are in the same row or column, writing down the 
letters as they are assumed until enough values have been established to facilitate recon- 
struction of the matrix. In the early stages of this process the student must exercise care 
in recording the letters so that no false relationships are formed; in other words, the values 
should be written down so that they are not in the same row or column with any other 
letters than those with which they are known to be related. This will entail spreading the 
work rather widely over the page. 



1 



RESTRICTED 



Lesaon 6, Military Cryptanalysis, Part 1 (20-6) 




REF ID:A56886 



RESTRICT - E- D 



DIGRAPHIC IDIOMORPHS: GENERAL 



AB AB 



-G EN ER 


AL AL 


AR M- 


NE 


ED ED 




-P RO CE 


ED ED 




-S UC CE 


ED ED 




-D ET RA 


IN IN 


G- 


-L 


IN IN 


G- 


-M 


IN IN 


G- 


OB TA 


IN IN 


G- 


QU 


IN IN 


E- 


RA 


IN IN 


G- 


RE MA 


IN IN 


G- 


SH 


IN IN 


G- 


-T RA 


IN IN 


G- 


CR 


IS IS 




PO SI TI 


ON ON 




-A 


RE RE 


EN FO RC ED 


-A 


SU SU 


AL 


BO 


TH TH 


E- 


WI 


TH TH 


E- 


-P AR 


TI TI 


ON 


RE PE 


TI TI 


ON 




VI VI 


D- 







AB 




AB 






-M 


AI 


NT 


AI 


N- 




RE 


AR 


GU 


AR 


D- 






CH 


UR 


CH 








DE 


Cl 


DE 








DE 


CO 


DE 








DI 


VI 


DI 


NG 




SP 


EA 


RH 


EA 


D- 




-R 


ED 


UC 


ED 




-S 


CH 


ED 


UL 


ED 






-B 


EE 


NN 


EE 


DE 






EM 


BL 


EM 






AM 


EN 


DM 


EN 


T- 


CO 


NT 


EN 


TM 


EN 


T- 


-s 


EV 


EN 


TE 


EN 




-s 


EV 


EN 


TE 


EN 


TH 






EN 


TR 


EN 


CH 






ER 


AS 


ER 







AB — AB 




TH 


ER EF ER 


EN CE 


TH 


ER ES ER 


VE 


WH 


ER EV ER 




-C AR EL 


ES SN ES 


S- 




GE OR GE 




SC 


HO OL HO 


US E- 


-I LL UM 


IN AT IN 


G_ 




IN CL IN 


E- 


-F IR 


IN GL IN 


E- 


MA 


IN TA IN 




-I NF AL 


LI BI LI 


TY 


-A 


ME ND ME 


NT 


SO 


ME TI ME 




-0 


NE NI NE 






NO TK NO 


WN 




NO WK NO 


WN 


-A PP 01 


NT ME NT 




-C ON TE 


NT ME NT 




-C 


OM PR OM 


IS E- 


-P 


ON TO ON 




-T HR 


OU GH OU 


T- 


-N 


Off KN OW 


N- 




PH OS PH 


OR US 




PO ST PO 


NE 


TR 00 


PS HI PS 




PA 


RA PH RA 


SE 


-P 


RE FE RE 


NC E- 




RE FE RE 


NC E- 


-T HE 


RE FO RE 




-P 


RE PA RE 






RE TI RE 






RE VE RE 


NT 


-C 


RO SS RO 


AD S- 


CA RE LE 


SS NE SS 




AT 


TE MP TE 


D- 




TH AT TH 


E- 


-F OR 


TH WI TH 
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ON 


ES 


TI MA TI 


ON 
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ON 


AC 
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ES 


-H 
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AB 






AB 










AB 






— AB 




-P 


AN 


AM 


AC 


AN 


AL 








AR 


MO 


RE 


DC AR 






AR 


BI 


TR 


AR 
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EN 


FO 


RC 


EM EN 






AS 


SO 


ON 
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RE 


EN 


FO 


RC 


EM EN 




AC 


CE 


PT 


AN 
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IN 


DE 


TE 
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EM 


PL 


AC 


EM 


EN 


T- 






IN 


TE 


RE 
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RT 


ER 


MA 


ST 
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IN 


TE 


RF 
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-I 


NT 


ER 


PR 


ET 
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IN 


TE 


RV 
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-A 


CC 


ES 


SO 


RI 
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- 


-I 


NC 


OM 


PE 
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IN 


CL 


UD 


IN 


G- 
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-c 
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GR 


ES 
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-D 


IR 


EC 


TF 


IR 


E- 
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ON 


ST 


RA 
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TO 


MO 


RR 


OW 


MO 


RN 
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- 


-c 


ON 


SU 
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PA 


NA 


MA 


CA 


NA 


L- 








PH 


OT 


OG 
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-I 


NT 


ER 


ME 


NT 










TH 


IR 


TE 
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-I 


NT 


ER 


VE 


NT 


10 


N- 


















CO 


NT 


IN 


GE 
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ON 
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OM 


OR 


RO 


WM 


OR 


NI 


NG 




















RA 


DI 


OG 


RA 


M- 




-I 


NS 


TA 


LL 


AT 


10 NS 






RE 


AS 


SU 


RE 






-c 


ON 


CE 


NT 


RA 


TI ON 




-P 


RE 


MA 


TU 


RE 






-c 


ON 


FL 


AG 


RA 


TI ON 


-D EF 


EN 


SI 


VE 


PO 


SI 


TI 


ON 


-c 


ON 


SI 


DE 


RA 


TI ON 




IN 


TE 


RD 


IC 


TE 


D- 


















QU 


AR 


TE 


RM 


AS 


TE 


R- 










AB 


— 


AB 


AB 




IN 


TE 
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Military Cryptanalysis, Part I 
Polygraphic substitution systems: Play- 
fair cipher systems 
3 

Text, pars. 45-46, Section IX; attached 
memoranda 

Cross-section paper of 34 inch squares 
Review Section VIII, TM 11-485 



Weight 

35 1. What are the characteristics of the normal Playfair cipher which make it 

recognizable? 

20 2. Solve the following and recover the keyword: 



5 



10 



15 



A 


Q0 


AP 


QO 


CM 


PQ 


BQ 


HO 


WE 


OB 


DQ 


WE 


LC 


FT 


OF 


TE 


B 


oc 


AO 


OC 


CK 


BX 


CM 


BV 


LF 


LX 


EX 


TW 


SD 


ND 


VL 


VR 


C 


FR 


XV 


AR 


VD 


LZ 


SB 


XV 


FW 


QV 


DL 


BK 


CM 


SB 


XV 


WS 


D 


Q ° 


PA 


BQ 


TE 


OC 


FR 


BV 


VQ 


QV 


TL 


VQ 


CX 


LY 


FW 


WS 

► 


E 


Q0 


PA 


BZ 


RF 


PV 


IV 


VD 


SZ 


TW 


XE 


WE 


OB 


IR 


DC 


PV 


F 


VZ 


SD 


ND 


MD 


FV 


ZD 


MH 


ZD 


VP 


BG 


MH 


DC 


VB 


RO 


CK 


G ! 


PA 


AP 


MS 


AO 


TW 


XE 


VD 


LZ 


VL 


ZR 


RZ 


LY 


OQ 


RZ 


OR 


H 


CS 


AR 


DC 


MA 


YM 


MS 


BX 


LP 


TK 


TK 


DW 
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20 3. The following cryptogram is suspected to contain the word DIVISION. 

Solve it and recover the original enciphering square. 



5 10 15 



A 


MP 


QK 


KA 


SZ 


QK 


KA 


HX 


EH 


LK 


YS 


ND 


TP 


CQ 


0L 


NP 


B 


RC 


AH 


LM 


SK 


ND 


YG 


QK 


DU 


RF 


QK 


EH 


LK 


YS 


ND 


TP 


C 


SA 


0E 


SY 


FR 


QP 


FE 


YS 


MO 


FD 


AF 


RJ 


RS 


DU 


RF 


RN 


D 


TP 


CQ 


UL 


LM 


SK 


ND 


UD 


FM 


JE 


HR 


VN 


QK 


UD 


EC 


LF 


E 


AK 


BH 


IY 


QV 


SM 


FO 


SY 


DY 

















20 4. a. Solve the following cryptogram and recover the original enciphering 

square. It is suspected that this message is signed “WINTHROP COL INF.” 



5 10 15 



A 


4L 


65 


4L 


C3 


IV 


PV 


7W 


XV 


ZX 


B1 


DS 


07 


L4 


CW 


4K 


B 


OF 


RT 


4L 


79 


OL 


HR 


YN 


MR 


RM 


DQ 


QV 


9R 


6M 


cx 


4K 


C 


QF 


4N 


4L 


79 


0L 


HR 


OP 


E4 


NR 


QB 


4M 


XS 


WN 


0E 


NU 


D 


GC 


QX 


4K 


0D 


51 


NP 


Z5 


4R 


L4 


VQ 


PF 


HN 


4L 


79 


OL 

— > 


E 


HR 

<r 


EM 


8X 


41 


ND 


AP 


Z1 


4N 


XC 


M4 


RT 


P6 


4M 


5H 


FZ 


F 


C3 


R9 


Q4 


Cl 


2H 


XZ 


48 


10 


L4 


YN 


PQ 


LM 


HR 


T4 


PQ 


G 


BQ 


RM 


D3 
























- 



2 b. What is the principal disadvantage of such a system for military 

purposes? 
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20 5. The following message was intercepted and solved by the cryptanalytic 

section at GHQ. The plaintext was found to read: “DIVISION RESERVES 
HAVE REACHED CROSSROADS EIGHT NINE THREE DASH B.” Re- 
construct the general system and show the specific key: 



GKATJ AHPOG FBRCQ RBISX CGFLG 

KERED EKOBQ RHKUB RZGKE RIffKU 

KAKUG XKOHK EBFEL AKESX 

6. Prom the solution of three Playfair ciphers, the following squares were 
derived. Reconstruct the original squares and show the keywords. 

5 a. Y P T G V 

C F A L Z 
QIUDB 
K X E S N 
R M 0 H W 

5 6. Z P E W L 

Q U G Y S 
A R H B C 
I D V K T 
M F X N 0 

5 «, WZRTV 

OPXYL 
MUHNE 
A B S I C 
K Q D F G 



3 
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ABCDEFGHIJKLMNOPQRSTUVWXYZ 




3 2734 1 4 1 10 24226224 21 141 



Problem 3 



€ 



5 
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MEMORANDUM ON PLAYFAIR KEYWORD DERIVATION 

1. Reconstruction of the square in Playfair ciphers takes place concurrently with the 
evolution of the plaintext, once a few correct assumptions are made. However, the square 
that is derived may not necessarily be the original enciphering square: more than likely it 
will be one of the 24 possible cyclic permutations of the original square. If the Playfair 
consisted of a keyword-mixed sequence, a permutation of the square will cause no difficulty 
in recovering the original matrix and hence the keyword. For example, if the derived 
square is Q T L N 0 then the square P Y R A M 

XZUVW IDSBC 

All P Y R EFGHK 

BCIDS LNOQT 

HKEFG UVWXZ 

is easily constructed because of the tell-tale letters UVWXZ occurring in a row of the de- 
rivative square. But when the Playfair square consists of a transposition-mixed sequence, 
then a different procedure must be adopted. 

2. As an example, let us take the transposition matrix 
58614327 from which A F T D K is the original square. Using the methods illus- 

W I H V M 
G U P B N 
Z R E Q S 
LXYCO 

trated in a previous memorandum ("Alphabet reconstruction and keyword derivation”), 
the columns IDS will afford rapid recovery of the keyword. But if instead of the original 
H K L 
V W X 

square we had one of its permutations such as Q S Z R E , then the columns F V 0 are 

C 0 L X Y 
DRAFT 
V M W I H 
B N G U P 

without significance; therefore the procedure above is inapplicable without a slight modifica- 
tion. 

3. Since it will be noted that a permutation of the rows will not affect the procedure of 



P Y 
B C 
N 0 
Z 



R A M I D S 
E F G H K L 
Q T U V W X 



then the columns F 
T 
V 



Z R E Q S Z R which contains 
L X Y C 0 L X 

A F T D K A F 

W I H V M W I ' 

GUPBHC1) 



keyword recovery, then we construct a 9 x 5 rectangle Q S 

C 0 
D K 
V M 
BN 

the five squares of the successive permutations of the columns. ‘ A 5 x 5 cut-out square will 
be found convenient in testing each permutation in turn. Affirmative results will be obtained 
when the correct permutation is reached, which in this case is the third square in the rectangle, 
namely 

Z R E Q S 
LXYCO 
A F T D K 

W I H V M 

G U P B N 
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DIGRAPHIC IDIOMORPHS: PLAYFAIR 



AB BA 





SC 


AB 


BA 


RD 














AF 


FA 


BL 


E- 












AF 


FA 


IR 












-B 


AG 


GA 


GE 










-H 


AW 


AI 


IA 


N- 














AL 


LA 


RE 


AS 






CO 




-B 


AL 


LA 


ST 








-I 




-F 


AL 


LA 


CY 








-R 


IN 


ST 


AL 


LA 


TI 


ON 


S- 






-P 


AR 


AL 


LA 


X- 














AP 


PA 


RA 


TU 


S- 




AD 






AP 


PA 


RE 


L- 




-C 


OM 






AP 


PA 


RE 


NT 






CO 






AP 


PA 


RE 


NT 


LY 




IM 






AR 


RA 


NG 


E- 












AR 


RA 


Y- 












-B 


AR 


RA 


CK 


S- 










-B 


AR 


RA 


GE 








PR 


-E 


MB 


AR 


RA 


SX 


SE 


D- 


-P 


RO 




-N 


AR 


RA 


TI 


ON 






-S 






AS 


SA 


IL 


AN 


T- 




-S 






AS 


SA 


UL 


T- 








-A 


MB 


AS 


SA 


DO 


R- 






WI 


-I 


MP 


AS 


SA 


BL 


E- 










-M 


AS 


SA 


CR 


E- 




-C 


IG 




-P 


AS 


SA 


GE 














AT 


TA 


CH 














AT 


TA 


CK 








-E 






AT 


TA 


IN 












-B 


AT 


TA 


LI 


ON 






FO 




-R 


AT 


TA 


N- 














BO 


OB 


YT 


RA 


P- 








IN 


DE 


ED 














-W 


EB 


BE 


D- 














EF 


FE 


CT 






* 








EF 


FE 


CT 


IV 


E- 






CO 


MP 


EL 


LE 


D- 










-E 


XC 


EL 


LE 


NC 


E- 








-E 


xc 


EL 


LE 


NT 










-E 


XP 


EL 


LE 


D- 










-I 


MP 


EL 


LE 


D- 












-P 


EL 


LE 


T- 










PR 


OP 


EL 


LE 


D~ 










-R 


EP 


EL 


LE 


D- 











SH 


EL LE 


D- 


-H 


EM ME 


DI N- 


ST 


EM ME 


D- 


ST 


EP PE 


D- 


AV 


ER RE 


D- 


NF 


ER RE 


D- 


NT 


ER RE 


D- 


EF 


ER RE 


D- 




ES SE 


NC E- 




ES SE 


NT IA L- 


DR 


ES SE 


S- 


PR 


ES SE 


D- 


NF 


ES SE 


D- 


PR 


ES SE 


D- 


-L 


ES SE 


N- 


-M 


ES SE 


NG ER 


PR 


ES SE 


D- 


OF 


ES SE 


D- 


GR 


ES SE 


D- 


TR 


ES SE 


D- 


TR 


ES SE 


S- 


-V 


ES SE 


L- 


TN 


ES SE 


S- 


AB 


ET TE 


D- 


AR 


ET TE 


S- 


-B 


ET TE 


R- 


-L 


ET TE 


R- 


IG 


HT TH 


RE E- 


-R 


IB BI 


NG 


RB 


ID DI 


NG 


-D 


IF FI 


CU LT 


-B 


IL LI 


ON 


-F 


IL LI 


NG 


-K 


IL LI 


NG 


-M 


IL LI 


ME TE R- 


-M 


IL LI 


NG 


-M 


IL LI 


ON 


SH 


IL LI 


NG 


SP 


IL LI 


NG 


-T 


IL LI 


NG 


-W 


IL LI 


AM 


-w 


IL LI 


NG 




IM MI 


GR AN T- 




IM MI 


GR AT 10 N- 
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AB 


BA 












AB 




BA 












IM 


MI 


NE 


NT 






PR 


AC 


TI 


CA 


BL 


E- 






SW 


IM 


MI 


NG 








PR 


AC 


TI 


CA 


L- 






-B 


EG 


IN 


NI 
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-T 


AC 


TI 


CA 


L- 








SP 


IN 


NI 


NG 
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IV 


EB 


OM 


BE 


R- 








-W 


IN 


NI 


NG 
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GI 
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CL 


IP 
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NG 








-G 


EN 


UI 
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SH 


IP 


PI 


NG 






-I 
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ER 
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-S 


TR 


IP 
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NG 






-I 


NT 


ER 


FE 


RE 


NC 


E- 








IR 


RI 


GA 
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ON 


-P 


EN 


ET 


RA 
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-M 


IS 


SI 


NG 








-R 


EV 


OL 


VE 


R- 








-M 


IS 


SI 


ON 










IN 


FI 


NI 


TE 






-A 


DM 


IS 


SI 


ON 








-D 


IS 


PO 


SI 


TI 


ON 






EM 


IS 


SI 


ON 








-S 


IT 


UA 


TI 


ON 








-H 


IS 


SI 


NG 








CA 


NA 


DI 


AN 








PE 


RM 


IS 


SI 


ON 






VE TE 


RI 


NA 


RI 


AN 






TR 


AN 


SM 


IS 


SI 


ON 








NI 


NE 


TE 


EN 










EM 


IT 


TI 


NG 








NI 


NE 


TE 


EN 


TH 








-F 


IT 


TI 


NG 










PE 


RC 


EP 


TI 


ON 




-S 


PL 


IT 


TI 


NG 








-P 


RE 


MI 


ER 








PE 


RM 


IT 


TI 


NG 






-S 


UR 


RE 


ND 


ER 






-A 


FT 


ER 


NO 


ON 








-0 


UR 


SE 


LV 


ES 








FO 


RE 


NO 


ON 








TH 


EM 


SE 


LV 


ES 












NO 


ON 


TI 


ME 






DE 


SE 


RV 


ES 










-F 


OL 


LO 


W- 








RE 


SE 


RV 


ES 










-H 


OL 


LO 


W- 










SE 


RV 


ES 










-C 


OM 


MO 


N- 
























-C 


OM 


MO 


TI 


ON 


















PO 


SI 


TI 


ON 


NO 


RT 


HO 


F— 


















-R 


EC 


ON 


NO 


IT 


ER 
























OP 


PO 


RT 


UN 


E- 






















OP 


PO 


RT 


UN 


IT Y- 






















OP 


PO 


SE 


























OP 


PO 


SI 


TE 
























OP 


PO 


SI 


TI 


ON 




















-C 


OR 


RO 


BO 


RA 


TE 




















-C 


OR 


RO 


DE 






















-T 


OM 


OR 


RO 


W- 




■* 




















-B 


OT 


TO 


M- 
























-C 


OT 


TO 


N- 
























CA 


RE 


ER 


























-S 


UC 


CU 


MB 


ED 
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AB 


— ■ 


— 


BA 


DE 


BA 


RK 


ED 




DE 


CL 


AR 


ED 




DE 


FE 


ND 


ED 




DE 


MA 


ND 


ED 




DE 


PA 


RT 


ED 




DE 


PL 


OY 


ED 




DE 


PO 


RT 


ED 




DE 


SE 


RT 


ED 




DE 


TA 


CH 


ED 




EC 


ED 


EN 


CE 




EM 


PL 


OY 


ME 


NT 


EN 


TR 


AI 


NE 


D- 


ME 


AS 


UR 


EM 


EN T- 


NE 


GL 


IG 


EN 


CE 


NO 


TA 


TI 


ON 




PA 


RA 


GR 


AP 


H- 


RE 


CE 


IV 


ER 




RE 


CO 


RD 


ER 




RE 


GI 


ST 


ER 




RE 


PE 


AT 


ER 




RE 


PO 


RT 


ER 




RE 


VO 


LV 


ER 




RO 


JE 


CT 


OR 




SE 


MB 


LI 


ES 





AB BA 

DE SE CR AT ED 

DE SI GN AT ED 

DE SP AT CH ED 

EN EM YP LA NE S- 

-D ET ER 10 RA TE 

-S EV EN TY FI VE 

IR RE GU LA RI TY 

NO MI NA TI ON 

SU SP IC 10 US 



AB BA 

DE MO NS TR AT ED 
NO TI FI CA TI ON 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 

SUBCOURSE 20-6 Military Cryptanalysis, Part I 

LESSON 8 Polygraphic substitution: quadricular 

tables 

CREDIT 3 

TEXT ASSIGNMENT • Text, Section IX 

MATERIALS REQUIRED Cross-section paper of inch squares * 

SUGGESTIONS Review Section VII, TM 11-485 

EXERCISES 

Weight 

30 1. The following cryptogram is suspected to contain the word RECON- 

NAISSANCE. Solve the text, and reconstruct the enciphering diagram: 

5 10 15 



A 


SA 


CJ 


JY 


RO 


HT 


KP 


LP 


DO 


CV 


PS 


LN 


PE 


GN 


RP 


SP 


B 


FP 


LU 


QT 


LW 


PR 


CJ 


KL 


RN 


QE 


RO 


CV 


MF 


SE 


LZ 


QZ 


C 


RR 


AO 


TH 


SQ 


PG 


TL 


GL 


NR 


QS 


UZ 


KK 


KK 


JE 


MV 


NL 


D 


LU 


AR 


QE 


SA 


MW 


KK 


LP 


SL 


AP 


PZ 


QV 


KK 


PB 


CJ 


JY 


E ’ 


RL 


CJ 


HA 


CO 


AR 


BH 


LL 


JH 


QT 


RP 


AS 


SL 


RP 


SL 


NL 


F 


QJ 


QT 


AJ 


NL 


IG 


NR 


WX 


AI 


HI 


YD 


KK 


JE 


CP 


YO 


SP 


G 


K0 


FB 


QT 


QP 


YP 


NZ 


SO 


AM 


DZ 


KR 


FP 


SX 


PK 


FJ 


PR 


H 


0E 


AK 


CE 


AS 


LP 


DO 


PB 


SI 


AX 


SX 


PB 


LP 


HT 


WX 


RF 


J 


GZ 


QT 


LW 


PR 


CJ 


JY 


AK 


HT 


JY 


AA 


NN 


SX 


CB 


RO 


WE 


K 


SA 


RD 


LL 


ML 


AX 


AF 


YU 


NC 


PK 


MS 


NE 


QJ 


QT 


AJ 
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2. This cryptogram is suspected of having a beginning similar to that of 
Problem 1. Solve the text, and reconstruct the enciphering diagram: 



1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


003 


315 


097 


114 


347 


261 


067 


217 


314 


241 


195 


062 


350 


115 


006 


451 


062 


141 


072 


472 


189 


192 


018 


400 


189 


067 


315 


097 


530 


403 


115 


393 


262 


609 


192 


356 


115 


186 


122 


467 


212 


071 


074 


237 


235 


114 


416 


115 


393 


271 


055 


293 


186 


552 


009 


062 


471 


141 


150 


193 


186 


516 


184 


266 


274 


470 


002 


238 


053 


186 


141 


072 


236 


516 


189 


004 


195 


191 


479 


067 


008 


397 


080 


137 


105 


189 


391 


262 


343 


408 


133 


273 


071 


084 


274 


400 


367 


223 


403 


186 


211 


524 


008 


292 


Oil 


122 


393 


284 
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3. This cryptogram is Suspected to begin with the stereotype “REFERRING 
TO YOUR MESSAGE" or "REFERENCE YOUR MESSAGE.” Solve the 
text, and reconstruct the enciphering diagram: 




8 
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Problem 1 



FREQUENCY DISTRIBUTIONS 



ei 



g g = gg 5 gggg 

g^g$ $ 5 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 



0 1 ,: ABCDEFGHIJKLMNOPQRSTUVWXYZ 



E(0 P ) =1471 E(0 r ) =849 



Problem 3 



0V 



ABCDEFGHIJKLMNOPQRSTUVWXYZ 



0 *.: 



g^g^g^gg g 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 



0*,: . ABCDEFGHIJKLMNOPQRSTUVWXYZ 

E(*p)=1207 E(0 r ) = 696 



0 = 1368 



0=1090 



0 = 1094 



0= 981 



0= 794 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 



SUBCOURSE 20-6 
LESSON 9 

CREDIT 

TEXT ASSIGNMENT 
MATERIALS REQUIRED 
SUGGESTIONS 
EXERCISES 



Military Cryptanalysis, Part I 
Miscellaneous monoalphabetic substitu- 
tion systems 
3 

Text, Section X 

Cross-section paper of K inch squares 
Read appended Partial Analysis Sheets 



Weight 

2 1. a. What characters are most used in practical cryptography today? 

2 b. What is the usual preliminary procedure in solving cryptograms in- 

volving symbols? 

4 e. In monoalphabetic substitution with variants, what characters are 

most commonly used? Why? 

2 2. What is the primary purpose of an analytical key? 

25 3. Solve the following cryptogram, and recover all keys: 

5 10 15 20 25 



A 


B 


u 


F 


W 


w 


H 


E 


A 


G 


H 


M 


I 


T 


A 


J 


J 


S 


K 


L 


S 


M 


N 


H 


I 


U 


B 


Y 


u 


Q 


A 


I 


A 


U 


M 


Q 


M 


U 


W 


I 


Z 


U 


V 


0 


J 


F 


H 


G 


U 


F 


M 


D 


C 


G 


Q 


Y 


K 


Q 


L 


L 


S 


U 


I 


Y 


K 


C 


G 


s 


W 


u 


F 


Q 


U 


U 


Q 


K 


C 


F 


D 


I 


w 


H 


Q 


K 


0 


G 


s 


ff 


I 


Y 


J 


Y 


0 


Y 


S 


K 


X 


F 


Q 


I 


A 


D 


Q 


B 


E 


Y 


K 


J 


Y 


S 


V 


C 


L 


L 


C 


S 


S 


H 


J 


ff 


Y 


M 


J 


Y 


S 


X 


ff 


Y 


K 


B 


F 


J 


U 


K 


K 


U 


P 


T 


P 


ff 


I 


I 


U 


Q 


H 


K 


X 


H 


Y 


K 


B 


J 


Y 


C 


0 


F 


G 


Y 


Q 


E 


N 


V 


Q 


I 


C 


U 


Y 


B 


I 


R 


R 


W 


P 


I 


Y 


Y 


N 


P 


S 


ff 


J 


E 


H 


P 


M 


I 


0 


P 


U 


Q 


A 


R 


H 


K 


Y 


Y 


Q 


C 


G 


W 


P 


G 


E 


P 


G 


A 


E 


L 


J 


S 


V 


T 


F 


E 


L 


T 


K 


B 


T 


D 


X 


V 


S 


X 


S 


R 


M 


Y 


F 


Q 


X 


T 


S 


H 


K 


D 


T 


T 


D 


Y 


C 


F 


X 


F 


Q 


H 
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G 


T 


G 


U 


D 


X 


C 
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S 


B 
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0 


L 
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H 


Q 
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H 


K 


F 


J 


H 


K 


I 
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ff 


ff 


A 


L 


H 


S 


I 


N 


ff 
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Q 


W 
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K 


Q 


S 


I 


U 
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H 


I 
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I 


Z 


ff 
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H 


P 


H 


ff 


U 
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4. Below is an intercepted message which is suspected to begin with the 
words “FIFTH DIVISION.” Solve it and recover all keys: 



67267 86555 72872 85237 72857 



63872 77684 78277 86378 38528 



6237 7 85863 78058 86259 59158 



5 6 660 58580 68167 05959 27768 



5 9 3 8 8 



5. This message below is suspected to contain the same plain text as Prob- 
lem 4. Reconstruct the general system and recover all keys: 



35591 59228 86600 24635 78881 



77777 84330 10435 55399 66611 



29872 58700 29388 75008 07106 



976 4 0 02300 31858 06958 97442 



02232 76849 91300 14090 68678 



74923 00102 44092 91100 55720 



49766 83330 77512 24780 11110 



30663 30444 60122 11898 



2 
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25 6. The enemy is using a system incorporating a 10 x 10 bipartite square 

consisting of letters, digits and syllables. The row and column coordinates are 
invariable, but a different internal chart is used each day. The chart for 16 Decem- 
ber was reconstructed and found to be based on the keyword PYRAMIDS as 
follows: 





0 


1 


2 


3 


4 


5 


6 


7 


8 


9 


0 


P 


Y 


R 


RA 


RE 


RED 


RES 


RI 


R0 
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The next day the following cryptogram, suspected to contain the word CROSS- 
ROADS, was intercepted. Solve the text, reconstruct the chart for the day, and 
determine the specific key: 
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Problem 3 

l 

In taking a uniliteral frequency distribution of this cryptogram, it was observed that 
the positions of the peaks and troughs of the distribution seemed to change during the 
compilation. The over-all distribution is 

8 7 9 6 6 12 10 20 19 11 18 9 9 5 6 9 21 4 22 10 24 5 19 8 21 3 N=300 
ABCDEF G H I J KLMNOPQRS T UVWXYZ 
* = 4136 E (* p ) = 5983 E (* r ) = 3363 

If the cryptogram is divided into two 150-letter sections, then the distributions are as follows: 

54 5 2 1 7 5 810 9 12 5 6 1 4 2 10-102142 9 3131 

1. ABCDEFGHIJKLMNOPQRSTUVWXYZ <£ = 1144 

3344555 12 92543427 11 4 12 8 10 3 10 582 

2. ABCDEFGHIJKLMNOPQRSTUVWXYZ<#>= 970 

E(<£p) =1520 E («*>,) =868 

When the message is divided into three 100-letter sections, then 
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E(<£ p ) =660 E(0 r ) =381 



When divided into four 75-letter sections, the distributions are 
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Upon dividing the text into five 60-letter sections, the distributions are 
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Finally, upon dividing the cryptogram into six 50-letter sections, the distributions are 
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This last set of distributions gives the most satisfactory results, both as regards the 
^-test ai/id also the expected number of blanks (cf. chart on page 25 of Text). Prom these 
several sets of distributions we were trying to determine the first two or three sections of the 
text that were monoalphabetieally enciphered. The division not only seems to be approx- 
imately 50 letters, but it also appears that practically all the sections are of equal length. 
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3 

None 

Cross-section paper of 34 inch squares 
None 



SUBCOURSE 20-6 
EXAMINATION 
CREDIT 

TEXT ASSIGNMENT 
MATERIALS REQUIRED 
SUGGESTIONS 
EXERCISES 
Weight 

Until now the problems of each lesson have followed very closely the order of subject 
matter in the text, so that the student knew fairly well what types of systems were involved. 
This examination is designed to test the student’s power of observation and logic in determin- 
ing the general cryptographic system. All that is required in the five problems below is the 
determination of the general system, together with the reasons for the particular classifica- 
tion. Solution of the message texts is not mandatory, but strongly recommended: recovery 
of the plaintexts and specific keys certainly would furnish the student with irrefutable proof 
of the validity of his hypotheses. 



20 



1. LWHPC XBVLW HVKZJ PBPGR BXHSL 

QKRHV FRLXB TCSBP KSBZK RCNBP 

FffHPD WHVGT BPDSB NDQKW FTBVF 

QFRHR.DZDSH PDQKZ BXGVH NLRFX 
HQCZK SBV'JQ MRHXB SLQBR FWJSB 

TKZHW MSBNL SBQBX KSDTH TMNHP 

CTBPH VDSJV DWHVH NLQHP CQCRB 

RLWKR HVFXF RBNCS BPJPH VDZFZ 

BVLWC WBZFS BWBPL XXXXX 
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20 2. E M U R B 

Q T I 0 N 
0 D C X S 
Q T I 0 N 
D T E N R 
M E G E B 
SKSPE 
R E T A K 

20 3. G H U I P 

>. R Q S A J 
J F K I H 
0 Q N J S 
F F H 0 N 
0 W 0 J T 
A N N K Z 
U K R R E 
G W Q L Q 



/ 

WPZLS ERMffU 
IYBHY VMIWB 
OUDIY MCYXD 
OBOPZ DNOIL 
TBNTA KBCOO 
DFGNS HRLIX 
WLDEG BWDMT 
PHTIM BHHOH 

GJHNI MBSPR 
OOQRS SIPQS 
GSANY PTKKD 
NUYEF ENPZV 
QUPOQ HUQTV 
EJWNQ EKJAE 
XVUKR EMMQR 
MWKIK VPXVU 
UXVVX VUATG 



ROBOP UWBWB 
EGOPS CDVCC 
YHSOU SMONB 
LBERO RTREM 
BOBEZ SKZZS 
SESVR LESUU 
ZTION SIVME 
IZUDM OEKHP 

IUSNS SHPGB 
MHVJI PQIVV 
YJKQX ZVNPR 
NPROQ QTKLN 
OTNDO JTKLP 
IOUTI QQGTB 
RTEII KVPXV 
DAEIP RSQII 
W Q Q V P 
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C 



Message B 



RBVYW BYYZC 
SYXCK NNBYM 

20 5 . 

SWWSN SDWPN 
VDZF D Q Y I N B 
IHYXM OUPWN 
, HNDKD XDAUB 

ALDWK XUBIZ 
UXIYV IOEXF 
PMBOO B A D N W 
BWINW AVZOX 
NGDNI FTRWI 
ZGQDF 



THEEB MMEZI ABXHW 
SXQDY AEPCX 

XDF-QF DSCDF AWKDM 
PGPPG LATNN TQRTS 
YTVAP UGOBZ RZFQl 
ODFFD INWTW UPGBO 
ZPPGI NAEAR Z A U M If 
QWPWI QDARO ZFYHI 
TBBTA GBZPH WSQRO 
FFYNG DQOZH YXZZX 
AUPRR PVSON MBGSP 





